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Abstract. Under mild conditions on n,p, we give a lower bound on the num- 
ber of n- variable balanced symmetric polynomials over finite fields GF(p), 
where p is a prime number. The existence of nonlinear balanced symmetric 
polynomials is an immediate corollary of this bound. Furthermore, we con- 
jecture that X(2 f , 2 t+1 l — 1) are the only nonlinear balanced elementary sym- 
metric polynomials over GF(2), where X(d, n) = <; 2 <...<i d x i\ x %2 ' ' ' x 'd > 
and we prove various results in support of this conjecture. 



1. Introduction 

Since symmetry guarantees that all of the input bits have equal status in a very 
strong sense, symmetric Boolean functions display some interesting properties. A 
lot of research about symmetry in characteristic 2 has been previously done in 
[II El El El 13 El CHI CHI HSl 1201 EH ESI EHI On the other hand, it is natural to extend 
various cryptographic ideas from GF(2) to other finite fields of characteristic > 2, 
GF(p) or GF(p n ), p being a prime number. For example, ^B] and [35] studied the 
correlation immune and resilient functions on GF(p). Also, |B] and ^3] investigated 
the generalized bent functions on GF(p n ). In Li and Cusick first introduced 
the strict avalanche criterion over GF{p). In j21j, they generalized most results of 
[7] and determined all the linear structures of symmetric functions over GF{p). 

Balancedness is a desirable requirement of functions which will be used in cryp- 
tography. In this paper, by an enumerating method, we give a lower bound for 
the number of balanced symmetric polynomials over GF{p) 1 and as an immediate 
consequence, we show the existence of nonlinear balanced symmetric polynomials. 
We did not find (even conjecturally) any simple characterization of the algebraic 
normal form of nonlinear balanced symmetric polynomials even for p = 2. However, 
wc do make substantial progress in the binary case if the polynomial is elementary 
symmetric (Section 5 below). We prove some results toward the conjecture that the 
polynomials X(2 t , 2 t+1 £— 1) are the only nonlinear balanced elementary symmetric 
polynomials, where X(d,n) = J2i 1< i 2< -.. < i d »ii^t a ■ ' ^id- 
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2. Preliminaries 

In this paper, p is a prime number. If /: GF(p) n — ► GF(p), then / can be 
uniquely expressed in the following form, called the algebraic normal form (ANF): 

p-i 

f(xi,x 2 ,-.-,x n )= ^2 a klk2 ,,, kn xi kl x 2 k2 ■ ■ ■ x n kn , 

ki.k2,---,k rl —0 

where each coefficient <Xfe 1 fe 2 ...fe„ is a constant in GF{p). 

The function f{x) is called an affine function if f(x) = a\X\ + • ■ ■ + a n x n + a$. 
If ao = 0, f(x) is also called a linear function. We will denote by F n the set of all 
functions of n variables and by L n the set of affine ones. We will call a function 
nonlinear if it is not in L n . 

If f(x) £ F n , then f{x) is a symmetric function if for any permutation 7r on 
{l,2,...,n}, we have /(a^i), ^(2), • • • , Xn(n))=f(%i> x 2 , . . . , x n ). The set of per- 
mutations on {1, 2, . . . , n} will be denoted by S n . 

We define the following equivalence relation on GF(p) n : for any x = (x\, . . . , x n ), 
y = (t/i, . . . , y n ) in GF(p) n , we say x and y are equivalent, and write x ~ y, if there 
exists a permutation 7r 6 S n such that (2/1,2/2, ■ ■ ■ , 2/n)=(»7r(i)>3 ; 7r(2)! ■ ■ ■ , a^O)) (by 
abuse of notation we write y = 7r(x)). Let x — {y \ 3 ir £ S n , n(x) — y}. Let x — 
(x~i,x~2, . . . ,x^) be the representative of x, where < xT < X2 < • • • < x?T < p — 1. 
Obviously, we have x — y x = y. 

3. Enumeration Results 

Definition 1. /: GF(p) n — ► GF(p) is balanced if the probability prob(f = k) = ^ 
for any fc = 0, 1, . . . ,p — 1. 

As an immediate consequence, / is balanced if and only if #{x € GF(p) n \f(x) = 
k} = p n - x . 

Using the equivalence relation of the previous section, we get that /: GF{p) n — ► 
GF(p) is symmetric if f(x) = f(y) whenever x = y. Let C{n,k) = m^rfcTi if 
< k < n and otherwise be the usual binomial coefficients. Then we have 

Lemma 1. The number of n-variable symmetric polynomials over GF(p) is 

C(p+n-l,n) i 

Proof. The number of different vector classes x is the number of solutions of the 
linear equation io + i\ + • • • + ip-i = n, where ik is the number of times k appears 
in x. We know that the number of solutions to the previous linear diophantine 
equation is the same as the number of n-combinations of a set with p elements, 
that is C(p + n — l,n) (see 01 P- 69]). Since a symmetric function f(x) has the 
same value for any element of x, the lemma is proved. □ 



p-i 

Lemma 2. We have J^J C{{k + l)a, a) — 



(pa)\ 



k=0 v ' 

Proof. It is a straightforward computation 

TTrffhM^ \ a! (2a)! (3q)! {pa)l - (pa)! 

feJt _ a! a!a! a!(2o)!""a!((p-l)o)! (a!)f' 



□ 
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Lemma 3. The number of n-variable balanced polynomials over GF(p) is 

(p n V- 

Proof. The number we are looking for is 

C( P n ,p n - 1 )C(p n - P n - 1 , P n - 1 ) ■ ■ ■ C( P n - (p - i)p n -\ P n -^ - [ ' 



(pn-ll)p' 

using Lemma |21 and the claim is proved. □ 
Let x = (0, . . . , 0, 1, . . . , 1, . . . ,p — 1, . . . ,p — 1), where io + ii H + i p _i = n, 

io ii i P ~i 

< ij < n, j = 0, 1, ... ,p — 1. The cardinality of the set x is the value of the 
multinomial coefficient C(n, io,ii, . . . , ip-2) — — 57- We have the following 
widely known multinomial expansion lemma. 

Lemma 4. p. 123] We have the following formula 

(to + h + ■ ■ ■ + t p ^) n = J2 C(n,i ,i 1 ,...,i p - 2 )W--'t^:l. 

io+'h-i \-i p -i=n 

By specializing to = ti = • ■ ■ = = 1, we get the following corollary. 
Corollary 1. The n-th power of p satisfies 

P n = ^2 C(n,i ,ii,...,i p -2). 

io+uH Hp-i=n 

From the proof of Lemma ^ we know that the number of terms in the sum in 
Corollary ^ is C{p + n — l,n). It is clear now, that to get balanced symmetric 
polynomials amounts to partitioning the set of C(p + n — 1, n) many multinomial 
coefficients C(n, io, ii, . . . , ip-2) into p groups, the sum of each group being equal 
top"" 1 . 

For a fixed solution {io, ii, . . . , i p -i} of io + i% + ■ ■ ■ + i p -i = n, there are 
moimfi-.-m ! man y wa ys to order it, where ij € {0, 1, . . . , n}, and mi is the number 
of times that I appears in {io, . . . , i p -i}, < I < n. Hence, 

(1) mo + mi + ■ • • + m n = p, and Omo + lrai + • • ■ + nm„ = n. 

Let us consider the following map: 

p— 1 n n 

F : {{i ,ii, ■ • .,ip-x}\}jj = n} -> {(m ,mi, . . . ,m„)| J^m ; = p,^lm l = n} 

j=o i=a 1=0 

defined by 

F({i ,ii, . . . ,i P -i}) = (m ,mi, . . .,m n ), 
where to/ is as above. It is not hard to check that F is a bijection. 

Now, we will partition the set of multinomial coefficients C(n, io, . . . , ip-2) using 
the following equivalence relation: C(n, io, ■ ■ ■ , ip-2) an d C(n,jo, . . . ,j P — 2 ) belong 
to the same class if and only if jo, ■ ■ ■ ,j P -i is a permutation of io, ■ ■ ■ , ip-x- Of 
course, any element in the same class has the same value. So, we can think of F as 
a map that assigns to each class the value — ; — %l r . 

Lemma 5. Let n,p be positive integers, with p a prime number. If mi < p for 
some i (and so for all i), or if gcd(n,p) — 1, then p divides mg [ m ^i... m j ■ 
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Proof. Assume rrn < p. By a known extension of Kummer's result that belongs to 
Dickson (see ^3 Theorem D, p. 3860]) the power of p that divides the multinomial 
coefficient equals the number of carries when we add mo + mi + • ■ • + m n in base 
p, but the mentioned sum is equal to p, therefore the number of carries is 1. (One 
can also prove the same assertion without using Dickson's result.) 

Now, assume gcd(n,p) = 1. If m; < p, the first part of the proof proves the 
claim. Assume m, > p. Since too + m i + • • • + m n — p, we can find j such that 
to j = p and too = • • • = rnj—i = nrij+i = ■ ■ ■ m n = 0. From the definition of the 
TOj's we obtain that jp — n, which is a contradiction. □ 

Remark 1. The two conditions rrii < p, and gcd(n,p) — 1 are not equivalent 
(although, it is true that gcd(n,p) = 1 implies mi < p). For instance, by taking 
too = 3, toi = 2,TO2 = 1,TO3 = 1,TO4 = to-5 = mg = to 7 = 0, we get too + mi + 
• • ■ + TO7 = p = 7 = n = Otoo + Itoi + • • • + 7to7, so p = n in this case. 

Since the cardinality of each multinomial coefficient class is a multiple of p, we 
can divide each class into p groups with an equal number of coefficients, hence, equal 
sum. Doing the same for each class, we finally partition all of the C(p + n — I, n) 
coefficients into p groups with equal sum. 

For a given (mo, mi, . . . , m n ), too+toi + - • ■+m n = p, Otoo + 1toi + - • ■+nm n = n, 
the partition number is 

c t p] - 1)' \ c r p'- (p - 1)' (p-i)! \ 

\ mg \ m\ ! ■ - - m n ! itlq \ m±l - • ■ m n l } \ mo \m\ \ ■ ■ ■ m n \ mg Imil ■ ■ ■ m n ! mg !mj ! - ■ ■ m n ! / 
„( Pl fc(p-l)! (p-l)! ^ c ( (P-1)! (P-1)! A 



V mo \m,\ \ • ' • fn n \ mg \m \ ! - - ■ m n ! mg \m \ ! ■ ■ - m n ! / \ mglmi ! - - ■ m n ! mo \m\ \ ■ ■ ■ m n 

By Lemma [3 this product can be written as 



( e! v 



(( (p-1)' y\ P ' 
In conclusion, we get our main result of this section. 

Theorem 1. Let N be the number of n-variable balanced symmetric functions over 
GF{p). If mi < p, for all i (or gcd(n,p) =1), then 

( 2! v 

N > TT \m \-m n \J- 

~ ^„ (( (p ~ 1)! Y)p 

IJj = o m i = P "mo^'mTi!''' 

Next, since the linear balanced symmetric polynomials over GF(p) have the form 
a(xi + ■ ■ ■ + x n ) + b, where a G GF(p)* and b £ GF(p), we get that the number 
of such functions is p(p - 1). Since = g| ^ Jg' , • • • j^ij^i > 12 ■ ■ -p = 
p! > p(p — 1), we have the next corollary. 

Corollary 2. J/n is not divisible by p, there exists a nonlinear n-variable balanced 
symmetric polynomial over GF(p). 

4. The balancedness of elementary symmetric polynomials over GF(2) 

In this section we consider the binary case, that is, p = 2. Here, we shall try 
to find all nonlinear balanced elementary symmetric polynomials. Throughout, 
x = (%i, . . . , x n ) and © is the addition modulo 2. 
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Definition 2. For integers n and d, 1 < d < n we define the elementary symmetric 
polynomial by 



(2) X(d,n)= 



ii<i2<— <id 

By abuse of notation, we let X(d, n)(j) be the value of X(d, n) when wt(x) = j. 
Since X(d,n)(j) = C(j,d) (mod 2), we get 

X(d,n)(j) = L_J . 

Because there are C(n,j) many vectors with weight j, we have the following theo- 
rems. 

Theorem 2. The elementary symmetric polynomial X(d, n) is balanced if and only 
if _ 

£ C(n,j)(-lf^ = 0. 

0<j<n 

Theorem 3. IfX(d,n) is balanced, then d < \n/2]. 
Proof. If n is even and d > § + 1, then 

C(n,j) > C(n, 0) + C(n, !) + ••• + C(n, »/2) > ST 1-1 . 



C(j,d)=0 (mod 2) 

7 

2 



n-1 



If n is odd and k > + 1, then 

5^ C(n, j) > C(n, 0) + C(n, 1) + • • • + C(n, (n + l)/2) > 2 

C(j,d)=0 (mod 2) 

In both cases, we have 

0<j<n 

£ C(nJ)- 

C{j,d)=0 (mod 2) C(j,d) = l (mod 2) 

Y C(n,j)-(y- 2 C(n,i) 

C(i,d)=0 (mod 2) \ C(i,rf)=0 (mod 2) 

= 2 I ^ C(n,j)-2"- 1 ] >0, 

\C(j,d)=0 (mod 2) / 

contradicting Theorem |2 □ 

Therefore, we see from Theorem [5] that the existence of balanced elementary 
symmetric polynomials is related to the problem of bisecting binomial coefficients 
(defined below). In .6,, two of us found some computational results about such 
bisections, which results we shall describe below. (We mention here that the au- 
thors of [201 found the number of solutions but without the explicit solutions.) It 
was suspected that the existence of nontrivial binomial coefficient bisections (as 
in |S|) may cause difficulties in the study of the existence of balanced symmetric 
polynomials, but we conjecture that this is not true for the elementary symmetric 
case. 



6 



THOMAS W. CUSICK+ YUAN LI 2 , PANTELIMON STANICA 3 * 



We begin with 

Definition 3. |Bj If Y17=o ^i^i n i *) = 0, £j G { — 1,1}, i = 0,1,..., n, we call 
(6q, . . . ,S n ) a solution of the equation 

n 

(3) ^2xiC(n,i) = Q, Si G {-1,1}- 

t=0 

In fact, whenever we get a solution of J3J), we get a bisection of binomial co- 
efficients, that is, we find A, B such that A U B = {0,1,..., n}, An B = 0, 

Obviously, if n is even, then ±(1, — 1, 1, — 1, . . . , 1) are two solutions of If 
n is odd, then (<5 , . . . , S n-i , — Sn-i v . . . , — Sq) are 2^ solutions of Q. We call 
these trivial solutions. 

Mitchell [HJ\ mentioned the nontrivial solutions for n = 8, 13. In [S], with a C++ 
program, we found all solutions of 10 when n < 28. Nontrivial solutions exist if and 
only if n — 8, 13, 14, 20, 24, 26. So, here we ask the question of determining necessary 
and sufficient conditions on the parameter n such that there exist nonlinear balanced 
symmetric polynomials on GF(2) n . 

First, we recall a known result that enables one to find residues of binomial 
coefficients modulo a prime p. 

Lemma 6 (Lucas' Theorem). Let n = a m p rn + a m _ip m_1 + • • ■ + a\p + ao with 
< a-i < p — 1 and k — b m p m + fo m -ip m_1 + • ■ • + b\p + bo with < b. L < p — 1, then 
C(n, k) = C(a m , b m ) ■ ■ ■ C(ai,bi) (mod p) 

The next lemma can be derived from PQ. However, here we give a direct proof. 

Lemma 7. For any integer d>2, the sequence {(—i-) c ^' d ^}j^Q is periodic of least 
period 2^ 

Proof. First, recall that d has at most [log 2 d] + 1 bits. For < i < 2P°& d l +1 - 1, 
according to Lemma we have C(i + 2^ d l+ 1 , d) = C(l,0)C(i,d) = C(i,d) 
(mod 2), so the least period is a divisor of 2^2 On the other hand, 1 = C(d, d) 
and C(d + 2l lo S2 d \d)= C(l, 0)C(0, 1) • ■ • = (mod 2), which implies that 2[ lo fe d \ 
cannot be a period. The lemma is proved. □ 

With the help of Lemma[7| we get the following computational results. The list 
could easily be extended. 

Lemma 8. We have 

_l)C(i,2) 



c- 



}£„ = 0011 
^ }£ = 0001 

T|C(j,4) 

}^o = 00001111 

±1 }°° Q = oooooioi 

3 — }^o = 00000011 

^ }~ = 00000001 

-v cu,a) }°^ = 0000000011111111 
}£L = 0000000001010101 



_l)C(j,9) 
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{ 1 -(- 1 ) C(j ' 10) }°° Q = 0000000000110011 

{ i-C-i) 00 ' 11 ' }oo q = 0000000000010001 

{ i-(-i) C(j ' 12) }oo q = 0000000000001111 

{ 1 -(~ 1 ) C(J ' 13) }°° o = 0000000000000101 

{ i-(-i) C0 ' 14) }°° o = 0000000000000011 
Theorem 4. / are positive integers, then X(2 t ,2 t+1 l — 1) is balanced. 
Proof. First, C(j, 2*) = when < j < 2* — 1. By Lucas' Theorem, we have 

C(j, 2*) = 1 (mod 2) when 2* < j < 2 t+1 - 1. 
By Lemma[3 the period of {(—l) c ^< 2 • > }|^o ^ s 2 t+1 . Hence, we get the sequence 
{(-l) ^' 2 *)}^ 1 ' -1 by repeating + + j— ■ exactly / times. Obviously 

2* 2* 

{(— l) c (J< 2 )} 2 =0 is a (trivial) solution of the equation X)™=o x iC(n, i) = when 
n = 2 <+1 Z — 1. Using Theorem [21 we obtain our result. □ 

We conjecture that the functions in Theorem 0] are the only balanced ones. 
Conjecture 1. There are no nonlinear balanced elementary symmetric polynomials 
except for X(2 t , 2 t+1 £ — 1), where t and i are any positive integers. 

5. Results Concerning Conjecture 1 

The remainder of the paper will be devoted to the study of Conjecture 1. A 
Boolean function /(x) in n variables is said to satisfy the Strict Avalanche Criterion 
("is SAC" for short) if changing any one of the n bits in the input x results in the 
output of the function being changed for exactly half of the 2" _1 vectors x with 
the changed input bit. The SAC concept is relevant for our work because of 

Lemma 9. The function /(x) = X(d, n) is SAC if and only if X{d — 1, n — 1) is 
balanced. 

Proof. By definition, / is SAC if and only if 

/(x)©/(x©a) is balanced for all a e GF(2) n , with tut(a) = 1. 
We have /(x)a/(x©(0, . . . , 0, 1)) = X(d - 1, n - 1), so the lemma is proved. □ 

We previously mentioned that any symmetric function is completely determined 
by the weight of its input, that is, /(x) = vj{wt{x)). Moreover, recall the usual 
algebraic normal form (ANF) of a Boolean function / in n variables 

n n 

/(x 1 ,...,x B ) = ®A / (i) IK 

i=0 u,u>i(u)=i j=l 

where Vf(i) = ^J^A/(j), and Xf(i) = ^^ w /(j), over GF(2) (j ^ i means that 

id« id* 
the binary expansion of j is less than the binary expansion of i, in lexicographical 

order) (see ^] Propositions 1 and 2, p. 2792]). 

The ANF of a symmetric function becomes 

n 

(4) f(x u ...,x n ) = ®\ f (d)X(d,n), 

d=0 
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in our notations. Further, when / is an elementary symmetric function, then 
Xf(d) = 1 is the only nonzero coefficient in the representation (@J. Moreover, 



(5) „, 



m = ©a,o-> = { o a ; 



A/(d), if d <i 
otherwise. 



We need the following further lemmas. We define the well known Walsh trans- 
form W/(w) by 

W)(w)= ^(_i)/W+-w. 

Lemma 10. A Boolean function f in n variables is SAC if and only if for every 
vector u with wt(u) = 1 and every vector v, we have 

Proof. This is a special case of Proposition 1 of Carlet 2, p. 35]. □ 

Lemma 11. ///(x) in n variables is SAC, then 

(6) W f^? = E ^ / (w) 2 = 2 2 - 1 . 

w:w n — w:w n —l 



Proof. We use Lemma flOl with v = and u = (0, . . . , 0, 1). It follows that wt(u) = 
n—1, so the first sum in © equals 2 2 ™ -1 . The two sums add up to 2 2 ™ by Parseval's 
Theorem, so the second sum is also 2 2,i ~ 1 . □ 

Lemma 12. If f(x) = X(d,n) is SAC and d is odd, then 

(7) W/(0) =2 n -2wt(f) andW f (l) = 2wt{f). 

Proof. The first equation in (J7J is clear for any /, whether or not d is odd. 

For the second equation, we observe that by JSJ our hypotheses imply that 
Vf(k) = for all even k. Since 

n n 

w f(°) = E( _1 )^ (,!)c, ( n ' fe ) and w fW = E^ 1 )" /( ' c)+fec ( n ' A: )' 

fe=0 fe=0 

a computation gives 

W f (0) + W f (l) = T. 
Now the second equation in follows from the first one. □ 

We define 

A = 0, 0,1,1; A= 1,1,0,0; B = 0, 1, 0, 1; B = 1, 0, 1, 0; 

(8) 

(7 = 0,1,1,0; C=l, 0,0,1; D = 0, 0, 0, 0; D = 1, 1, 1, 1. 
The next two lemmas are used in the proof of our Theorem 

Lemma 13. (Folklore Lemma [22, Lemma 3.7.2]) Any affine function f on n 
variables, n > 2, is a linear string of length 2™ made up of 4-bit blocks I±, . . . , /2 71 - 2 
given as follows: 

1. The first block Ii is one of A, B,C, D, A, B,C or D. 

2. The second block I2 is h or I\. 

3. The next two blocks I3, J4 are I\, I2 or I\, 
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n— 1. The 2 n 3 blocks /2"- 3 +ij ■ ■ ■ , ^2™- 2 are Ji, . . . , /2»- 3 or /i, 7 2 ™- 3 • 
Lemma 14. FFe /iawe (-l) x w = /or a// w ^ or 1. 

x,toi(x) even 

Proof. Let E(w) denote the 2™ _1 -vector of bits x-w (mod 2), where x runs through 
the n-vectors x of even weight in lexicographical order. Thus E(w) lists the expo- 
nents in the sum in the lemma. Consider the 2™~ 1 by n array of the vectors x with 
even weight, taken in lexicographical order. By the Folklore Lemma, each column 
in this array is a 2™~ ^vector which gives the truth table of a nonconstant linear 
function in n — 1 variables. In fact, taking the columns left to right, the functions 
are simply x±, x%, . . . , x n -x, x\®X2® ■ ■ • ®x n -i- The vector sum of any subset of at 
least one and at most n — 1 of the n columns (corresponding to w ^ or 1) is thus 
the truth table of a nonconstant linear function and so it is balanced. Each vector 
E(w) is one of these vector sums, so the sum in the lemma is 0. □ 



Remark 2. The sum in Lemma \PJl is the sum of the Krawtchouk polynomials |17l 
pp. 130 and 150-153] (variable y = wt(y/)) 



P k (y,n)= ]T (-l) x ' w =Y,{-V j C{y,j)C{n-y,k-j) 

x,wt(x)=k 3=0 

of even degree k in y. 

Theorem 5. If /(x) = X(d,n) has odd degree d, then W/(w) = — W/(w) for all 
w/0 or 1. 

Proof. Let / be an elementary symmetric function of degree k, that is / = X(d, n). 
We compute the Walsh transform 



(9) 



Wf(W) = (-i) /(x)+x - w 

xezj 

= (_x)/(x)+x-(i+w) 

xGZJ 

^_ ]^/(x)+lut(x)+x-w 



xez 

n 



= ^2 53 (-i) /(x ) +u,t ( x ) +x 

Aj— x,iot(x)= k 
n 

= ^(_l)«/W+* 53 

k— x,-u;t(x)= k 
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Next, we use (0). Since d is odd, then any integer i with d <i has to be odd, as 
well. It follows that Vf(k) = 0, for any even integer k. Thus, © becomes 

n 

W f (w) = £(-!)«/<*)+* £ 

k— x,iut(x)=fe 
n 

= E t- 1 )^ E (-!) x ' w 

fe=0, e-uen x,iui(x) = k 

n 

E c- 1 )"^ E (-!) x ' w 

fc— 0, odd x,iut(x)= 
n 

E (-ir w - E E (-!) x ' w - 

x, tot(x) = even k— 0, odd x. iot(x)=fe 

Since 

n 

w>(w) = E w m E (-!) x ' w 

fc=0, euen x.,wt(x)=k 
n 

+ E c- 1 )*'^ 5 E (-!) x ' w 

fc— 0, odd x,iut(x)=fc 
n 

E (-ir w + E E (-!) x ' w ' 

x. tui(x) = even k=0, odd x. t/;£(x)=fc 

to prove Theorem [Slit will suffice to show that 

E (-i) xw = o, 

x,iui(x)— even 

as long as w ^ 0, 1, and that follows from Lemma ITU □ 

Theorem 6. If f(x) = X(d,n) is SAC and d is odd, then W/(0) = W f (l). 

Proof. By Theorem^ all of the terms except W/(0) 2 and Wf(l) 2 in the two sums 
in © cancel out (for all other w, Wf(yv) is in one sum and Wf(w) is in the other 
sum). By Lemma Il2l both square roots are positive and we get Theorem |SJ □ 

Corollary 3. If d is odd and /(x) = X(d,n) is SAC, then wt(f) = 2 n ~ 2 . 

Now we determine when X(d, n) is SAC. To deal with the case when d is an even 
integer, by Lemma|H| it is enough to show: 

Lemma 15. If d > 1 is odd, then X(d,n) is not balanced. 

Proof. Formula © shows that when / = X(d, n) we have Vf(i) = 1 if and only if 
d < i. Thus we have 

(10) wt(X(d,n))= E C(n,i)<Y,C(n,i) = 2 n -\ 

d^i,i<n i odd 

where the inequality holds because d ^ i and d odd implies i is odd. If d > 1, then 
d < i cannot hold for all odd i < n (in particular, d ^ d — 2), so the inequality in 
(|10p is strict. Therefore, X(d, n) is not balanced. □ 
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Lemma 16. Suppose d > 1 is odd. If 

(11) d = 2* + 1 and n = 2 t+1 £ for some positive integers t, £, 
then wt(X(d,n)) = 2 n ~ 2 . 

Proof. First we observe 

(12) wt(X(d,n)) = 0(n,i) 

because of (0, which shows that when / = X(d,n) we have Vf(i) — 1 if and only 
\i d <i. By (|12|) . we need to show that 

(13) wt{X(d,n))= C(n,i) = 2 n ~ 2 

d^.i, i<n 

if and only if i JTTJ t holds. If ITU holds, the sum in (|T3|) is 

2' + l^i, i<2 t + 1 i 

{C{2 t+1 £-l,i) + C{2 t+1 £-l 1 i-l)) = 
2 (C(2 t+1 £-l,i) + C(2 t+1 f-l,z-l)) = 

^ C(2* +1 ^-l,j) = 2 n - 2 , 

2'Xj, j<2*+ 1 f-l 

(note i is never even in the first three sums, since then 2' + 1 ^ i is false; this 
justifies the second last equality, since in the last sum j runs through disjoint pairs 
of consecutive integers) where the last sum is wt(X(2 t , 2 t+1 £ — 1) by (|12fl and so is 
2 n ~ 2 by Theorem 0] Thus we have proved that (fTT^ implies i fHfy . □ 

We would like to prove the converse of the previous lemma. The following work 
moves toward that goal, but does not achieve it. Next, we prove five lemmas, which 
establish many cases of the converse of Lemma 1161 

Lemma 17. Let n = 2 t+1 £ for some positive integers t, £. If j is odd and 2* + 1 < 
j < 2 t+1 + 1, then wt(X(j,n)) < 2"~ 2 . 

Proof. The argument of the previous lemma shows that if (|llfl and (|13fl hold for 
some given t and £, then the set 

S(t, £) = {i: 2 t + l<i,i< 2 t+1 t = n} 

gives a set of binomial coefficients {C(n, i) : I S S(t,£)} whose sum is 2™~ 2 . (ft 
is easy to see that S(t,£) has n/4 elements, but we do not need this fact.) Now 
suppose that (|13[1 holds for n — 2 t+1 £ and for some odd d — j, say, satisfying 
2 f + 1 < j < 2 t+1 + 1. Then wt(J) > 2, so the set 

T(j, n) = {i : j < i, i < 2 t+1 l = n} 

is a proper subset of S(t,£). Therefore the sum of the binomial coefficients in 
{C(n,i) : i £ T(j,n)} is < 2" -2 , contradicting our assumption that 1)13(1 holds 
with d = j. □ 
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Since we refer to it often, we include here for completeness an equation given 
by Canteaut and Videau in pQ (these sums are called lacunary sums of binomial 
coefficients, see |15p. Results like this concerning the binomial coefficients are very 
old. Some proofs and references are given in |12| . 

Lemma 18. For positive integers i,n,p, we have 
(14) 

0<i<n j=i \ V / / v / 

j=i (mod 2 P ) 

Lemma 19. Let t, r be positive integers. Suppose that a% > a% > 05 > • • • > aj , 
with J = 2K + 1, are nonnegative integers. Define the sum 



Y a J sin 

1<J<J 



2*+! 



I/T = 0, then r = (mod 2 t+1 ). 



Proof. Write bk — aj, for j = 2k + 1. For convenience, let a = ^rr- Then, using 
Abel's summation formula, T becomes 



A' 



T = J2b k sm((2k + l)a) 

k=0 

K—l m 

Y _ 6 ™+i) sm((2k + l)a) + b K Y sin((2/c + l)a). 



fc=0 

A-l m A 



m=0 fe=0 fc=0 

Note that for the first term where m = 0, we have (60 — &i) sin a 7^ 0, if r ^ 
(mod 2 t+1 ). Also, (6 m — b m+ i) > 0, and 6^ > 0. The conclusion follows once we 
show that 

m 

sin a and ^""^ sin((2fc + l)a) 

fc=0 

have the same sign. Indeed 

m m 

sin a sin((2fc + l)a) = - ^(cos(2/ca) - cos((2/c + 2)a) 

fc=0 fc=0 

= ^(1 -cos((2m + 2)a) > 0. 
The lemma is proved. □ 

Remark 3. Note that T above has the same sign as sin a. 

Because of Theorem |3 there is no loss of generality in taking n > 2(d — 1) in 
our next lemma. 

Lemma 20. Let r,t be positive integers, d = 2* + 1, n = 2 t+1 , and r ^ 
(mod 2 t+1 ). Then wt(X(d, n + r))^ 2 n+r ~ 2 . 
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Proof. Let d := 1 + 2* be fixed. Now, using Pascal's identity, we get that S := 
wt(X(d, n + r)) satisfies 

S = J2 C(n + r,i)= E (C(n + r - 1, i) + C(n + r - 1, i - 1)) 

d^i<n-\-r d~<i<n-\-r 

E C(n + r-l,i)+ C(n + r-l,j) 

d^i<n+r—l 2 t <j<n+r-l 

j even 

E C(n + r -2,t)+ E (C(n + r-l,j) + C(n + r-2,j)) 

d<i<n+r-2 2 t ^ 1 j<n+r-l 

j even 

Continuing in this manner, we obtain 

r 

S = J2 C(2 t+ \*)+ E £C-(n + r-fc,i) 

d<i<n+r-r 2*^j<n+r-l fc=l 

j even 

r 

= 2 "~ 2 + E E c ( n+r -^') 

2*^i<n+r-l fc=l 

j euen 

r 

= 2"- 2 + E E C(n + r-fc,i) 

2*Xj<Jl+r-l 

even 
r 2 t - 1 -l 

(15) = 2- 2 + E E E C(n + r-fc,j) 

fe=l s=0 j=2s+2* (mod 2 t+1 ) 
0<j<n+r— 1 

We push further the previous identity, by computing the innermost sum. So, 
J2 C(n + r-k,j)=A% +1 (2 S + 2 t ) 

j"=2s+2* (mod 2 t+1 ) 
0<j<n+r-l 

in the notations of Lemma |18I where N := n + r — k. Thus, using equation (|14ll . 
we obtain 



2*-l 



Af 1 (2s + 2 l ) = 2 n+r - k - t - 1 +2-*E ( 
Since 



(In 



2 COS — TT-r cos 



N 



a(N ~ 4s - 2 t+1 )vr 



2 *+iy 2*+! 

a=l 



a(N - 4s - 2 t+1 )7r , N „ a(iV-4s)7r 
cos -i '- = (-l) a cos 2<+1 , 

we get 

2*— 1 

(16) ^jv (2s + 2) = 2^ +2 2^( _1 ) V 2c0S 2*+i/ 2*+i 
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We obtain 

S = 2 n - 2 + Y, E ^ +1 (2s + 2*) 



k=l s=0 



->n-2 



2«.+r-fc-t-l 



- 2 E E E^ 1 ) 2cos ^TT cos - 



fc=l s=0 a=l 



2*+!/ 2*+ X 



r 2*~ 1 -12*-1 



2"- 2 + 2"+ r - 2 E2- fc + 2- i E E E( _1 ) a ( 2( 



an \ N a(N-As)n 



2t+i / 2* +1 

fc=l k=l s=0 a=l 

= 2— + 2- E 2 E 1 E(-l)° (2 cos ^) " cos a(7V " 

fc=l s=0 a=l 



2 t+iJ 2*+! 



Therefore, to prove our assertion, we need to show that 

r 2*~ 1 -12 t -l 



T : = 



E £(-!) ( 2c0S 2m) 



2 t+l 

V- \ - , „ a- \" (r '•' ~ ^ ' a(n + r - k - As)n 

EEt- 1 ) ( 2cos ^tt) E cos ~ — — 

fc=l a=l s=0 

a(n + r — k — As)n (r — k — As)an 



k=l s=0 a = l 
r 2* - 1 



Since 



and so, 



we obtain 

r 2*-l 



2 t+l 2 *+! 



a(n + r — k — As)n\ , .„ / (r — k — As)an 
cos ^ ^ >- = {-IT cos ' 



2 t+i / v ; V 2* 



a7r \"+r-fe . , { (r - k - As)an 
T=y > 2 cos —v I V cos' 



EE( 2cos ^tt) E 

fe=l a=l s=0 

Formula (17.1.1) of 1 ! states 

N 



2 t+l 



( 17 ) E cos ( sa; + y) = csc 9 cos Hr 



x ( Nx \ . f (N + l)x 



s=0 

tt-1 



V sm 



Taking A = -^t, N = 2 — 1, x = —AA, y — (r — k)A in the previous formula, 
we obtain 

E cos ((r-k-4s) A) = csc(-2yl)cos((2*- 1 -l)(-2A) + (r-fc)A)sin(2 t - 1 (-2A)) 

s=0 

= csc(2A)sin(^Jcos(-^ + (r-A; + 2)AJ 

1 - (-l) Q sin((r-A: + 2)A) 
_ 2 sin(2A) ' 
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l-(-l) Q , .sn+r-fc sin((r - k + 2)A) 



Now, T becomes 

T = yy ^=^-(2 cos A) r 

^ ^ 2 y ' sin(2A) 

fc=i 0=1 v 7 

= g 2 sin(2A) g/ 2C ° S ^ ^((r-fc + 2)A) 

We evaluate the inside sum using formula (14.7.1) of [TT] 

w-i 

V" b k sin(kx + y) = - siny + (1 - 26 cos x + b 2 )^ 1 ■ 
fc=i 

[sin y + 6 sin(x — y) — b N sin(Nx + y) 
+b N+1 sin((N- l)x + y)\ 

with N = r + 1, b = (2 cos A)" 1 , x = -A, y = (r + 2) A. We get 

r 

J^(2 cos A)- fe sin((r -k + 2) A) 
fc=i 

= - sin((r + 2)A) + «T 2 (sm((r + 2) A) - 6sin((r + 3)A) 

-b r+1 smA + b r+2 sin(2A)) 
= -sm((r + 2)A) + b- 1 (2 cos^4sin((r + 2) A) — sin((r + 3)j4)) 

-b r {2 cos Asm A - sin(2A)) 
= -sin((r + 2) A) + 2cos^4sin((r + 1)A) = sin(rv4). 



and so, 



T = y (2 cos A) n ^~ r ~ 1 

^ 2 v ; sinA 

a— 1 
2*-l 



n+r _i sin(rA) 

ZCOS/iJ 

a— 1, odd 



^ (2 cos A) T 



sin A 

Recall that our initial sum is 

S = 2 n+r - 2 + 2~ f T, 
so we need to prove T =/= 0. Observing that 

2 t+1 +r-l 

JIT 1 



Oj = I cos 



2 t+1 J sin^r 

strictly decreases as j increases, 1 < j < 2* — 1, Lemma IT51 shows that T ^ 0, 
thereby proving our claim. (One can prove, by a slightly more complicated method 
that, in fact, T > 0, but we did not need that.) The proof of the lemma is done. □ 

Lemma 21. If d is odd and 2 l + 1 < d < 2 t+1 - 1 for some positive integer t, 
then wt(X(d, n)) ^ 2"~ 2 for any n of the form n = 2 t+1 £ + r, where £ is even and 
< r < 2 t+1 + 2*. 
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Proof. From equation Ijl2|l we have 

(18) wt(X(2 t + l,n)) = E 

fceJ(i) i=k (rood 2*+i),i<n 

where 

I(t) = {k: k odd, 2* + 1 < k < 2 t+1 - 1} 

= {the largest 2 t_1 odd least positive residues (mod 2 t+1 )}. 

Let k := 2* + 2s + 1, where < s < 2* _1 - 1, and let A 2 * +1 (k) denote the inner 
sum in (|18|) . Then Lemma IT51 gives (with A — ^trr) 

2*-l 

A* + \k) = 2"-( t+1 ) + 2"-* E (cos^)"cos((n - 2fc)A) 

(19) 7 1 

2*-l 

= 2 «-(t+i) + 2 n-t (-iy (cos A) n cos ((n - 2 - 4s) A) , 
i=i 

since 

cos((n - 2fc)A) = cos((n-2(2* + 2s + l))A) 

= cos((n - 4s - 2)A - 2 t+1 A) = cos((n - 4s - 2)A - » 
= cos((n - 4s - 2)A) cos(j7r) + sin((n - 4s - 2)A) sinQV) 
= (-l) J cos((n-4s-2)A). 

If <i is odd, let J(d) C /(i) be the subset of I(t), made up of the 2 t ~ 2 integers k 
that satisfy d <k < 2 t+1 — 1 (for example, if d = 2* + 3, then J(d) contains every 
other integer in I(t), starting with 2* + 3). Let n = 2 t+1 £ + r, < r < 2 t+1 + 2*. If 
r = 0, Lemma IT7I implies the result. Now, assume 1 < r < 2* +1 + 2*. Using i|17|) we 
obtain (recall that A — jtTr) 

(20) 

E cos (s(-4A) + (n - 2)A) 

s=0 



- csc(-2A) cos ((2'" 1 - 1){-2A) + (n - 2)A) sin(2*- 1 (-2A)) 



: csc(2A) cos(-2* A + nA) sin — 



csc(2A) ( cos ( — ) cos(nA) + sin ( — ) sin^A) ) sin ( — 



■■ csc(2A) sin 2 ( ^ ) sin(nA) 



2 

1 -(-!)' 



csc(2A) sm((2 t+1 e + r)A) 
csc(2v4)(-l) £ sin(rA). 
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Certainly (with k = 2* + 2s + 1), 

wt(X(d,n)) = E C ^ 1 ) 

fceJ(d) i=k (mod 2' + 1 ),i<n 

< 53 Ar i (fc)= 2 E 1 ^ t+i (2 t +2 S +i). 

fce/(t) s=o 

Then, using O and J20J 
(21) 

2 t ~ 1 -l 2*~ 1 -1 2*— 1 

53 ^ +1 (2' + 2s+ 1) = 2™~ 2 + 2""* ^ 53( -1 ) j ( cosA ) n cos ((n - 2 - 4s)A) 

s=0 s=0 j = l 

2*-l 2 t_1 -l 

= 2"- 2 + 2™-* 53 ( cos 4) n 53 cos ((n - 2 - 4s)A) 

3=1 s=0 
3=1 

= 2 „_ 2 + 2 _ t( _ 1)W y (2cogA) n-l s j^l. = S 

^ sin A 

j=l,oaa 

But the last sum is strictly positive by Lemmas 1191 and |2"U1 Therefore, if £ is even, 
S < 2 n ~ 2 , and this proves our lemma. □ 

Remark 4. We see that if n — 2 t+1 £ + r, £ odd and r < 2* ; then we can write 
n = 2 t+1 £ + r = 2 t+1 {£ - 1) + 2 t+1 + r, with £-1 even, and < r' := 2 t+1 + r < 
2 *+i + 2 «. Thus, the only cases left unchecked in the previous lemma (which gives 
many cases of Conjecture 1 ) are: n — 2 t+1 £ + r, £ odd, 2 l < r < 2 t+1 . 



6. The Case wt(d) > 3 

Lemma ^\ Corollary [31 and Lemma [5U] show that Conjecture 1 holds for any 
X(d,n) with d — 2*. A key fact, given in the proof of Lemma |2"U1 is a useful 
formula for wt(X(d, n)) when wt(d) = 2. We can find a similar formula when 
wt{d) = 3, however it becomes substantially harder to handle. 

Lemma 22. Let d := 1 + 2 s + 2*, w/iere 1 < s < t and t>2. Then 

W t(X(d,n)) = 2^-2^ 53 (2co S A)"- l Sin((n 3, 2 : ) f ) ^ M) 
v v ' " ^ v ; sin^sin(2 s + 1 A) 

(22) 2 / = ;' od<i 

-2— 1 V (2cosBr- 1 ^^ 

Proof. Let A = B = From d < i, we get that i = 2 t+1 i' + 2* + 2 s+1 p + 

2 s + 2q+ 1, and so, i = 2* + 2 s+1 p + 2 s + 2g+ 1 (mod 2 t+1 ). Certainly the converse 
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is also true. Using the previous observation, 
(23) 



,t+l 



wt(X(d,n))= J2 C(n,i)= Yl E A n (2 t + r+ 1 p + r + 2q + l) 

d<i<n p=0 q=0 



-)t— S— 1 1 OS — 1 



1 2 S_1 -1 / 2 r -l 

= ^ ^ 2 ,l - t - 1 + 2-*^(2cosA)"cos((ri-2* +1 -2 s+2 p-2 s+1 -4q-2)A) 

P =o g =o y j=i 

2 f -l 2 f ~ s ~ 1 -l 2 S_1 -1 

= 2 t- fl -i 2a -i 2 n-t-i + 2 -t C os A)" ^ ^ cos((n - 2 i+1 - 2 s+2 p - 2 S+1 - 4q - 

j=l p=0 g=0 

2 f -l 2 f ~ s ~ 1 -l 2 S_1 -1 

= 2™- 3 + 2-* (2 cos A)" ^ Y cos (( n - 2* +1 - 2 s+2 p - 2 S+1 - 4? - 2)A) 

j=l p=0 g=0 

using Lemma IT51 Further, by using formula p7|) with x = — 4A, y = (n — 2 t+1 — 
2 s+2 p - 2 S+1 - 2) A, N = 2 S ~ 1 - 1, the innermost sum is equal to 

csc(x/2) cos(7Vx/2 + y) sin((7V + l)x/2) 

= csc{-2A) cos((2 s - 1 - 1){-2A) + (n - 2 t+1 - 2 s+2 p - 2 S+1 - 2)A) sin(2" -1 (-2A)) 
= csc(2^) cos((n - 2 t+1 - 2 s+2 p - 3 • 2 s ) A) sin(2 s A), 

which is defined everywhere, since j < 2 — 1. Thus, 
(24) 

wt(X(d, n)) = 2 n - 3 + 2~* ^ (2 cos A)"' 1 g^ffjii ^ cos((n - 2* +1 - 2 s+2 p - 3 • 2 S )A). 

j=i sm p=0 

Let 

[/ := {j : j = 2*~ s fc, 1 < fc < 2 s - 1} 

We distinguish two cases: 

Case 1. Assume j 6 U. That means that 

2 ., + 2 A=2S+ 2_g_ = 2S+2 fc2^ = 2fc7r; 

and using the periodicity of the cosine function, we obtain that in this case, the 
innermost sum is 

2 t - s - 1 cos((n-2 t+1 -3-2 s )A). 

Case 2. Assume j £ U. In this case, we apply again formula (|17|l with x = —2 S+2 A, 
y = {n — 2 t+1 — 3 • 2 S )A 1 N = 2 t ~ s ~ 1 — 1, the innermost sum is equal to 

csc(-2 s+1 A)cos((2 t - s - 1 - 1)(-2 S+1 A) + (n - 2 t+1 - 3 • 2 s ) A) sin(2 t - s - 1 (-2 s+1 A)) 
= csc(2 s+1 A) cos(-2 t J 4 +(n- 2 t+1 - 2 S )A) sin(2M) 
= csc(2 s+1 A) cos((n - 2 s ) A - 3jtt/2) sin(j7r/2) 
= csc(2 s+1 A) cos((n - 2 s ) A + jir/2) sin(j7r/2) 
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Thus, from equation J23J, we obtain (note that A = B, if j = 2* s k; also, 
2 t+1 A = jir, 2 s B = kir/2) 



(25) 



2*-l 



! cos((n - 2 S )A + j'tt/2) sin(j7r/2) sin(2 s A) 



^(X(d,n))=2- 3 + 2-* Y (2cosA)»- l LUb ^' t ' Z ^^ ' /^ Zi / 
v v ' " . ^ v ; sinAsin(2 s + 1 A) 



2 f -l 



+ 2-' J] (2 cos A)"' 1 S1 "ff/ ) 2 t ' s ~ 1 cos((n - 3 ■ 2 s ) A - jn) 

2 n-3 + 2 -t ^ f 2 co^ir- l COS((n " r)A + jV2)sin(j7r/2)sin(2M) 
^ 1 j sinAsin(2 s + 1 A) 

+ 2- 5 - 1 V 1 (2cos J B)"- l Sm( ^ /2) cos((n - 3 • 2 S )B - 2 t -"kn) 



fc=l 

2*-l 



2 „_ 3 + 2 _ t j2 (2cosA) r 



.! cos((n - 2 s ) A + j'tt/2) sin(j7r/2) sin(2M) 



sinAsin(2»+ 1 A) 



2 s — 1 

+ 2-*- 1 V (2cosi?)"~ l Sin(W2) cos(ni? + far/2). 
^ sin B 



fc=i 

(The last equality follows from the periodicity of cos, and also from cos((rt — 3 • 
2 S )B) = cos(nS-3fc7r/2) = cos(nB + fc7r/2).) Further, if j <£ U, then sin(2 s+1 A) is 
well defined, however sin(j7r/2) = 0, if j is even. Thus, the terms in the first sum 
of the last equation of (|25J) are zero, unless j is odd. Then, if j is odd, we get 

cos((n - 2 s ) A + jV/2) sin(j7r/2) 
= (cos((n - 2 s ) A) cos(jV/2) - sin((n - 2 s ) A) sin(j7r/2)) sin(j7r/2) 
= -sin((n-2 s )A). 

Therefore, 

u,t(X(d,n))=2"-*-2-< Y (2cosA)"- l Sin((n - 2 : )A o ) ^g M) 

j=l,odd y ' 



+ 2- 5 - 1 V (2 cos g)"- 1 sin ( fc ^/ 2 ) C0S ( nB + fc7r/2) 

^ — ' sin R 

or better, yet, 



fe=i 



wt(X(d,n)) = 2 



n— 3 



2 _ t g lg jn((n-2-)A)^) 
^ v ; sin^sin(2 s + 1 A) 

j=l,odd y ' 



1 y (2co S By^ s ' m{nB) 

^ K ' sin 5 



k—l,odd 



□ 
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In order to prove Conjecture 1, by Lemma|niand Corollary it would suffice to 
show that for n > 2(d — 1) (we can assume this because of Theorem we have 

(26) wt(X(d,n)) ± 2 n - 2 

for all pairs d, n except d = 2* + l, n = 2 t+1 £, where t and t are any positive integers. 

Lemma |2J3 proves (|26[) when wt(d) = 2. We attempted to prove \2ty when 
wt(d) — 3 by using Lemma[53 but the sums in (1221) were too complicated to allow 
us to cover all of the cases. Certainly 1221) shows that for fixed d, (|26|l holds for 
all sufficiently large n, because the factors (cos^4) n_1 and (cosi?)" -1 tend to as 
n — ► oo, which implies wt(X(d,n)) — 2™ -2 < for all large n. Our computations 
suggest that this inequality will always hold if wt(d) is large enough. In fact, we 
conjecture 

Conjecture 2. If n > 2(d — 1), d is fixed and wt(d) > 6, then wt(X(d,n)) — 
2"~ 2 < 0. 

Acknowledgements. The authors would like to thank Prof. Jingbo Xia for the 
proof of Lemma Il9l which simplified their original argument. 
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